[Fire TV Android Development] clarke.hackworth:
So I got a serial line soldered on to my brick. It looks like we have triggered an anti-rollback mechanism. "[ANTI-ROLLBACK] PL version mismatch!"

If we had the LK and TEE1 partitions from a pre-5.2.1.0 version we may be able to fix this. Can anyone provide those?

Last part of serial output (I can provide full output if someone wants):

Device APC domain init setup:

Domain Setup (0x0)
Domain Setup (0x0)
Device APC domain after setup:
Domain Setup (0x0)
Domain Setup (0x0)
mmc_rpmb_get_wc, mmc_set_part_config done!!
mmc_rpmb_get_wc, mmc_rpmb_pre_frame done!!
mmc_rpmb_send_command -> req_type=0x1, type=0x2, blks=0x1
mmc_rpmb_send_command -> req_type=0x2, type=0x2, blks=0x1
mmc_rpmb_get_wc, mmc_rpmb_start_req done!!
mmc_rpmb_get_wc, rpmb_req.result=0
[RPMB] RPMB Provisioned
mmc_rpmb_send_command -> req_type=0x1, type=0x4, blks=0x1
mmc_rpmb_send_command -> req_type=0x2, type=0x4, blks=0x1
[RPMB] Valid anti-rollback block exists
[PART] Image with part header
[PART] name : LK
[PART] addr : FFFFFFFFh
[PART] size : 411044
[PART] magic: 58881688h
[PART] Verifying Second Bootloader... src 0x1000200, dst 0x41E00000
[VERIFY_LK] Succeeded in LK verification.
[PART] Success!! Verified Second Bootloader... src 0x1000200, dst 0x41E00000

[PART] load "lk" from 0x0000000001000200 (dev) to 0x41E00000 (mem) [SUCCESS]
[PART] load speed: 1549KB/s, 411044 bytes, 259ms
[PART] Image with part header
[PART] name : ATF
[PART] addr : FFFFFFFFh
[PART] size : 54272
[PART] magic: 58881688h

[PART] load "TEE1" from 0x0000000000600200 (dev) to 0x42099740 (mem) [SUCCESS]
[PART] load speed: 17666KB/s, 54272 bytes, 3ms
bldr calling tee_verify_image 1
mtee_verify_decrypt call
tee_verify_image returned ret=0
[PART] Image with part header
[PART] name : TEE
[PART] addr : 17780000h
[PART] size : 1827328
[PART] magic: 58881688h
0:dram_rank_size:40000000
1:dram_rank_size:40000000

[PART] load "TEE1" from 0x000000000060D800 (dev) to 0xA8880000 (mem) [SUCCESS]
[PART] load speed: 31865KB/s, 1827328 bytes, 56ms
bldr calling tee_verify_image 2
mtee_verify_decrypt call
tee_verify_image returned ret=0
[TZ_INIT] TEE start entry : 0xA8880000
[TZ_INIT] MEID : 0xC8, 0xC3, 0x12, 0x87
[TZ_INIT] MEID : 0xE, 0x24, 0x15, 0x1B
[TZ_INIT] MEID : 0x4A, 0x3B, 0xF9, 0xE1
[TZ_INIT] MEID : 0x2D, 0x27, 0x3F, 0x69
[BLDR] bldr load tee part ret=0x0, addr=0x101000
[ANTI-ROLLBACK] Processing anti-rollback data

mmc_rpmb_send_command -> req_type=0x1, type=0x4, blks=0x1
mmc_rpmb_send_command -> req_type=0x2, type=0x4, blks=0x1
[ANTI-ROLLBACK] Versions in RPMB: PL: 0x3 TEE: 0x104 LK: 0x2
[ANTI-ROLLBACK] Checksum validated
[ANTI-ROLLBACK] Signed Binaries Versions: PL: 0x1 TEE: 0x104 LK: 0x2
[ANTI-ROLLBACK] PL version mismatch!
[ANTI-ROLLBACK] L: 0x3 R: 0x1

[PART] size : 54272
[PART] magic: 58881688h

[PART] load "TEE1" from 0x0000000000600200 (dev) to 0x42099740 (mem) [SUCCESS]
[PART] load speed: 17666KB/s, 54272 bytes, 3ms
bldr calling tee_verify_image 1
mtee_verify_decrypt call
tee_verify_image returned ret=0
[PART] Image with part header
[PART] name : TEE
[PART] addr : 17780000h
[PART] size : 1827328
[PART] magic: 58881688h
0:dram_rank_size:40000000
1:dram_rank_size:40000000

[PART] load "TEE1" from 0x000000000060D800 (dev) to 0xA8880000 (mem) [SUCCESS]
[PART] load speed: 31865KB/s, 1827328 bytes, 56ms
bldr calling tee_verify_image 2
mtee_verify_decrypt call
tee_verify_image returned ret=0
[TZ_INIT] TEE start entry : 0xA8880000
[TZ_INIT] MEID : 0xC8, 0xC3, 0x12, 0x87
[TZ_INIT] MEID : 0xE, 0x24, 0x15, 0x1B
[TZ_INIT] MEID : 0x4A, 0x3B, 0xF9, 0xE1
[TZ_INIT] MEID : 0x2D, 0x27, 0x3F, 0x69
[BLDR] bldr load tee part ret=0x0, addr=0x101000
[ANTI-ROLLBACK] Processing anti-rollback data

mmc_rpmb_send_command -> req_type=0x1, type=0x4, blks=0x1
mmc_rpmb_send_command -> req_type=0x2, type=0x4, blks=0x1
[ANTI-ROLLBACK] Versions in RPMB: PL: 0x3 TEE: 0x104 LK: 0x2
[ANTI-ROLLBACK] Checksum validated
[ANTI-ROLLBACK] Signed Binaries Versions: PL: 0x1 TEE: 0x104 LK: 0x2
[ANTI-ROLLBACK] PL version mismatch!
[ANTI-ROLLBACK] L: 0x3 R: 0x1